REMARKS 



This Preliminary Amendment cancels the original claims, without prejudice, in the 
underlying PCX Application No. PCT/DE2004/001613. The Preliminary Amendment also adds 
new claims 1 1-20. The new claims conform the claims to U.S. Patent and Trademark Office 
rules and do not add new matter to the application. 

In accordance with 37 C.F.R. § 1.125(b), the Substitute Specification (including 
the Abstract) contains no new matter. The amendments reflected in the Substitute Specification 
(including Abstract) are to conform the Specification Eind Abstract to United States Patent and 
Trademark Office rules or to correct informalities. As required by 37 C.F.R. §§ 1 .121(b)(3)(ii) 
and L 125(c), a Marked-Up Version of the Substitute Specification comparing the Specification 
of record and the Substitute Specification also accompanies this Preliminary Amendment. 
Approval and entry of the Substitute Specification (including Abstract) are respectfiiUy 
requested. 

The underlying PCT Application No. PCT/DE2004/001613 includes an 
International Search Report, dated December 28, 2004, a copy of which is submitted herewith. 

Applicants assert that the subject matter of the present application is new, non- 
obvious, and usefiil. Prompt consideration and allowance of the application are respectfully 
requested. 

RespectfiiUy submitted, 
KENYON & KENYON LLP 

By: J6^ 

Gerard A. Messina 
(Reg. No. 35,952) 

One Broadway 
New York, NY 10004 
(212) 425-7200 



Dated: ^/^^l K 
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[10191/4229] 

CONTROL UNIT 
Background Informa tieft F/g/^/ Of The Invention 

The present invention is directed to a control unit of th e typ e set forth in th e ind e p e nd e nt claim . 

Background Information 

From BE German Published Patent Application No. 101 23 839-A4-, it is known to provide for 
5 data transmission, here via SPI (Serial Peripheral Interface), in a control unit between a 

processor and at least one further circuit, in particular, ASIC's. The processor outputs the clock 
pulse to the ASIC's. The processor derives the clock pulse from the oscillation of a system 
oscillator, such as a pierce oscillator. 

Summary e f^Fk eOfThe Invention 

10 The inventive control uni t having th e f e atures of th e indep e nd e nt claim has the advantage over 
the related art that the processor in the control imit, preferably a microcontroller, now monitors 
the clock pulse based on output signals of at least two clock outputs. This monitoring can be 
carried out by hardware and/or software. A monitoring signal is generated as a function of the 
monitoring, said monitoring signal being usable for input into a fault memory and/or for 

15 outputting a warning, for example, via a warning light. However, the fault in question can also 
be output on a display in the vehicle. The monitoring signal can even be used to transmit a radio 
transmission to a remote maintenance center, so that the fault is communicated to the remote 
maintenance center, which can inform the driver to have a corresponding repair carried out. It 
is possible to use more than two clock outputs, and thus, the corresponding output signals to 

20 monitor the clock pulse. This provides high safety against clock signal errors, which may 
provoke failures of the airbag control unit. 

Advantag e ous improv e ments of th e control unit s e t forth in th e ind e p e nd e nt claim are mad e 
possibl e by the m e asures and r e fin e m e nts specifi e d in the dep e ndent claims. 

A particular advantage is that the clock outputs are connected in such a manner that the 
25 control unit generates a monitoring signal as a function of the output signals from the clock 
outputs. Preferably, the circuit is configured such that the outputs are connected to an 
exclusive-OR element so that when one clock output no longer matches the other clock 
output with respect to its output signal, the exclusive-OR element produces an output signal. 
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thus indicating a fa\ilt. This is a particularly simple and reliable hardware circuit for fault 
indication. 

It is also advantageous that the clock outputs are fed back to inputs of the processor, so that 
the processor itself can monitor the output signals of the clock outputs. Thus, for example, 
5 the processor is able to perform monitoring in terms of amplitude, and also to simulate the 
exclusive-OR function by means of software. Given an appropriate redundant system clock 
design, the separate monitoring of the output signals allows the control unit to continue 
operating, even if an output signal no longer meets the requirements. 

To this end, the at least two output signals of the two clock outputs jointly generate the 
10 clock pulse for the other circuits. This is most easily achieved by ORing the two clock 
output signals. The ORing can preferably be accomplished by connecting a diode in the 
forward direction to each of the two clock outputs, respectively. Then, the diodes are 
connected together on the other side, so that ORing is performed. The clock signal 
generated in this manner can then be further processed by an impedance transformer and/or 
15 an amplifier; the impedance transformer being intended to minimize the load on the clock 
signals, and the amplifier being intended to suitably amplify the clock signal. 

A further advantage is that the two clock outputs are assigned to different port groups, just 
as the two inputs which are intended for monitoring the output signals of the clock outputs. 
This separation into different port groups means an enlarged distance between the circuit 
20 groups on the chip, so that in the event of hardware damage of one output or input, the other 
output or input is not affected by this. This increases the safety of the system. 

Brief Description e f-fee -O/T/rg Drawing 

An e x e mplary e mbodim e nt of the pr e s e nt inv e ntion is d e pict e d in th e drawing and will b e 
explained in greater detail in tho following d e scription. 

25 In tho drawing, 

Tlie Figure 4-is a block diagram of the control unit according to the present invention. 
Detailed Description 

Control units, especially for controlling passenger protection devices, such as airbags, belt 
pretensioners, or roll bars, must be highly reliable so as to prevent intemal failures resulting in 
30 unwanted situations for vehicle passengers. For data transmission between the microcontroller 
in the control unit and the connected components in the control unit, the so-called ASIC's, such 
as a firing circuit control system, or the sensors or interface modules, the SPI (Serial Peripheral 
Interface) is frequently used. In this instance, a line MOSI (Master Out Slave In) is used by the 
microcontroller to transmit data to the coimected components, and an additional line MISO 
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(Master In Slave Out) is used to allow the connected ASIC's to transmit data to the 
microcontroller. The lines in question are separate. The serial peripheral interface has still 
further lines, such as the chip-select line and the clock line. These are indeed separate hardware 
lines. The fiC controller provides this clock pulse via the clock lines to the connected ASIC's, 
5 resulting in a synchronous data transmission. It is now clear that a clock signal error may result 
in faults in the functioning of the control unit. 

Therefore, in accordance with the present invention, the clock signal is monitored based on the 
output signals of two clock outputs of the microcontroller, which can also be a different 
processor. This monitoring can be carried out by hardware or software. For hardware-based 

10 implementation, it is possible to use, for example, an exclusive-OR (non-equivalence) element, 
whereas in the case of soflware-based monitoring, the microcontroller itself is used by feeding 
the output signals of the clock outputs back to inputs of the microcontroller. The 
software-based implementation has the advantage that the individual output signals can be 
monitored separately. In addition, when using two clock outputs, higher redundancy for the 

15 clock generation can be achieved by preferably ORing the outputs which supply the clock 
signal. 

T7ie Figure-4- is a block diagram of the control imit according to the present invention. The 
block diagram concentrates only on the essential elements of the present invention, so that 
other components which are also present in the device are not shown for the sake of simplicity. 

20 A microcontroller /xC is connected via a data output MOSI to ASIC's 1 , 2 and n present in the 
control unit. Line MOSI is used for data transmission from fiC to ASIC's 1, 2 and n. 
Microcontroller jLtC is also connected to ASIC's 1 , 2 and n via a data input. Here, however, lines 
MISO is used for data transmission of the ASIC's to the microcontroller. The data transmission 
between the microcontroller and ASIC's 1, 2 and n can take place virtually in p£u-allel. Via 

25 further outputs 10 and 1 1 , clock signals of microcontroller ^iC are output, said clock signals 
being generated by microcontroller \xC by dividing an oscillator signal. Oscillators that can be 
used here include, for example, a pierce oscillator which can easily be set into oscillation and 
delivers a stable clock signal. Clock outputs 10 and 1 1 are connected to diodes Dl and D2, 
respectively; the diodes, in turn, being interconnected to an input of an amplifier V. Amplifier 

30 V then delivers the clock pulse SCKr. This clock pulse then goes to components ASIC 1, ASIC 
2 and ASIC n. Thus, microcontroller iiC and ASIC's 1, 2 through n operate in parallel with 
respect to processing. 
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However, the output signals of clock outputs 10 and 1 1 are each also supplied to inputs of an 
exclusive-OR element. The exclusive-OR element produces a signal at its output when the two 
input signals are different. This means that the exclusive-OR element produces a 1 only if a 0 
and a 1, or a 1 and a 0 are present, otherwise it produces a 0. A warning light driver 15 is 
5 controlled as a function of this output signal of exclusive-OR element 12. In the event of a fault, 
i.e., when the two clock signals are different, said warning light driver activates a warning light 
to indicate the fault. 

Alternatively or additionally, the output signals of clock outputs 10 and 1 1 can also be 
monitored by microcontroller fiC itself. To this end, the output signals are fed back to two 

10 inputs 13 and 14, respectively. Microcontroller ^iC can then monitor the output signals by 
means of software. The microcontroller can do this, for example, by simulating the 
exclusive-OR function by means of software, and by separately monitoring the output signals 
in terms of amplitude. Microcontroller ^C then generates a monitoring signal as a function 
thereof, said monitoring signal being used, for example, for controlling the warning light driver. 

15 However, it is also possible to display a warning on a display in the vehicle. Inputs 3 and 4 
should be assigned to different port groups. Port groups are understood here to be adjacent 
inputs and outputs. Clock outputs 10 and 1 1 should also belong to different port groups in order 
not to be geographically adjacent so as to prevent failure of the two clock outputs in the event 
of a hardware fault. 

20 Instead of the SPI communication, which is a bus communication, it is also possible to use 

point-to-point connections between microcontroller [xC and the individual ASIC's, respectively. 
However, other bus communications are also possible alternatively to the SPI connection. 



NYOl 1103571 vl 



MARKED-UP COPY 



Abstract O f The Disclosure 
Propos e d is vu A control unit featuring clocked data transmission between a processor {\xC) and 
at least one further circui t (ASIC 1, 2, n) , the processor (ti€)-itself outputting the clock pulse 
(SCKr) . The processor (tt€}-monitors the clock pulse (SCKr) b ased on the output signals of at 
least two clock output s (10, 11) . 

(Figuro 1) 
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